Engagement untuk klien yang scope-nya butuh stack berjalan di infra mereka (on-prem) atau client cloud (BYOC — Bring Your Own Cloud) dengan operational governance yang ditangani Capital Commerce.

Untuk siapa?

Klien regulated vertical (banking, fintech, healthcare, BUMN) yang butuh data residency + audit posture per regulator (UU PDP, OJK, sectoral)
Tier 1A burned-builder yang sudah pernah cloud-managed pattern fail dan ingin sovereign default
Organisasi yang punya kebijakan IT internal mandate self-host untuk data sensitive
Klien yang sudah ada infra (data center own, cloud account own) dan butuh layer operational management

Apa yang termasuk dalam scope

Architecture self-host design — Postgres, n8n, Strapi, LiteLLM, Plausible, etc. semua self-hosted di infra klien
Provisioning — Linux server setup, Docker compose, systemd unit, nginx vhost, TLS, firewall, monitoring
Governance + access control — RBAC, audit log, secrets management (Bitwarden / HashiCorp Vault)
Backup + DR — nightly backup, offsite replication, restore drill quarterly
Compliance posture — data residency Indonesia, audit log retention per regulator mandate
Monitoring + alerting — Plausible self-host untuk web analytics, custom Prometheus / Grafana untuk infra metrics
Maintenance retainer — kami operate stack untuk Anda dalam scope yang explicit di SOW
IP transfer Day 1 — code, configs, runbook semua milik klien sejak deploy
Quarterly security review — patch cadence, vulnerability assessment

Apa yang TIDAK termasuk

24/7 on-call SLA enterprise-grade — Phase 1 retainer kami business hour Indonesia (07:00-22:00 WIB), eskalasi via WhatsApp
Compliance certification (ISO 27001, SOC 2) — kami align ke standard tapi tidak issue certification
Hardware procurement — kami advise, klien yang procure
Multi-tenant SaaS hosting untuk klien klien Anda — itu beda scope

Posture sovereign per [[Canonical/sovereign-decision-matrix]]

Tier 1 self-host mandatory untuk:

Database operasional dengan client data
Workflow execution engine yang process sensitive context
LLM context proxy (LiteLLM)
CMS + content custodian

Tier 2 dengan account klien (kalau klien punya budget cloud + operational capacity):

LLM API endpoint (Anthropic direct atau via OpenRouter — multi-model exit path)
Email + Workspace (Google / Microsoft)
Asset CDN (Cloudflare R2 / S3-compatible)

Per-engagement decision tergantung klien posture: full Tier 1 (regulated heavy) atau hybrid Tier 1 + Tier 2 (mid-market sovereign).

Engagement model

Implementation phase (8-16 minggu): provision + setup + UAT + handover. Project-fee.
Managed retainer (ongoing): operational maintenance + monitoring + monthly report + quarterly review. Monthly retainer fee.
Klien yang prefer in-house ops post-handover: hanya implementation phase, no retainer. Tim klien yang run post-handover.

Pricing model

Implementation = project-fee per scope. Retainer = bucket monthly (per [[Canonical/capital-commerce-pricing-standard]] §3 maintenance bucket). Quotation per kebutuhan post konsultasi awal.

Managed / Private Deployments